debug-identity-provider
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external diagnostic logs from identity provider scanners, which constitutes an ingestion point for untrusted data.
- Ingestion points: Diagnostic logs retrieved from isitagentready.com or WorkOS tools (SKILL.md, Step 1).
- Boundary markers: No explicit delimiters are specified for the log content interpolation in the suggested process.
- Capability inventory: Access to execute_command, read_file, write_file, and other file system manipulation tools.
- Sanitization: The skill contains explicit security guardrails (ASI03) instructing the agent to redact internal hostnames and customer identifiers before sharing artifacts.
- [SAFE]: The skill is a well-structured diagnostic utility that proactively addresses security concerns associated with its primary task. It emphasizes end-to-end verification and human-agent trust transparency.
Audit Metadata